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1 Docket No.: FXO-118.01 
2 

3 FIELDBUS UPGRADABLE APPARATUS AND METHOD 
4 

5 CLAIM OF PRIORITY 

6 This application claims priority to provisional application 

7 U.S. S.N. 60/136,253, entitled FIELDBUS UPGRADABLE DEVICE, and 

8 filed on May 27, 1999, naming VLADIMIR KOSTADINOV as inventor, 

9 the contents of which are herein incorporated by reference. 

it BACKGROUND OF THE INVENTION 

p2 (1) Field of the Invention 

0:3 The present invention relates generally to communications 

ri4 systems, and more particularly to utilizing communications 

systems for uninterruptive software upgrading. 

He (2) Description of the Prior Art 

57 In the manufacturing and process control industries, there 

18 is a continuing effort to eliminate older, centralized plant 

19 control strategies, in favor of standard protocols. This type of 
2 0 control provides true device interoperability, enhanced field- 

21 level control, and reduced installation costs. 

22 The inherent modularity and intrinsic software reliance of 

23 modern manufacturing and process control systems allows a 

24 platform wherein distributed control may be best utilized. 

2 5 Communications protocols such as the commonly known Fieldbus 

1 

20/402453.05 



1 technology allow for the interconnecting of measurement and 

2 control equipment such as sensors, actuators, and controllers. 

3 Examples of some Fieldbus technologies include Profibus™ and 

4 Foundation™. Fieldbus is an all-digital, serial, two-way 

5 communications system that serves as a Local Area Network (LAN) 

6 for instruments in process control and manufacturing automation 

7 applications. Fieldbus facilitates the distribution of the 

8 control application across the network. Control through the 

9 network is particularly advantageous when the devices or 

IJ) processes to be controlled are physically remote from a central 

il control station. 

Although the systems, sensors, and devices of such 

IIB manufacturing and process systems are modular, and there are 

24 communications standards for interconnecting components of such 

|fe systems, there is currently no method or apparatus for allowing 

SJs device, system, or sensor software upgrades from remote locations 

Jif? without interrupting the control system. 

18 What is needed is a method and apparatus that facilitates 

19 uninterrupted and remote upgrade of specified control system 
2 0 components . 

21 

22 SUMMARY OF THE INVENTION 

23 It is one aspect of the present invention to provide a 

24 method and system for utilization with the well-known Fieldbus 
2 5 communication protocol, that allows uninterrupted software 
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upgrading of remote, microprocessor controlled devices that exist 
on the Fieldbus network. 

In a preferred embodiment, the Fieldbus network comprises a 
plurality of control devices, wherein control devices may be 
input devices, output devices, or input/output devices. Each 
control device may be configured for Fieldbus communications. 
Each control device also comprises at least two memory areas 
within which executable software and data may reside, wherein at 
least one memory area may be active and at least one memory area 
may be inactive. Memory areas may further comprise multiple 
memory segments. Each control device additionally comprises a 
selector device that specifies to the microprocessor those memory 
areas that are active. In a preferred embodiment, the selector 
device directs the control device microprocessor to the active 
memory areas during the microprocessor operating system cycle. 

It is another aspect of the present invention to allow a 
Fieldbus communications system wherein a host computer configured 
within the Fieldbus network may provide software upgrades and 
other control to remote control devices through the network. In 
an embodiment, software upgrades are performed without 
interrupting the control device processor, by issuing a Fieldbus 
compatible command that indicates to the control device 
microprocessor that a new software version is available for the 
designated control device. The respective microprocessor routes 
the software upgrade to a presently inactive memory area within 
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the designated control device that shall be designated the new 



2 memory area. Such transfer occurs during otherwise unscheduled 

3 communications periods to avoid interruption to the network or 

4 the control device. Similarly, the remotely located control 

5 device microprocessor performs the transfer without interrupting 

6 the presently executing application or data functions in the 

7 control device. The microprocessor also verifies the new 

8 software. The new memory area may be activated during a 

9 microprocessor idle period by directing the microprocessor to the 
10 new software, thereby providing a seamless transition to the new 
#L memory area and hence the new software. 

ii2 It is another aspect of the invention to provide a mechanism 

Ss whereby the host may return the microprocessor to a previously 

gi4 active memory area within a designated control device. 
^ It is yet another aspect of the invention to utilize new 

5^6 memory areas for increasing the control device functionality. 

^7 The number of active memory areas may increase as functionality 

^8 is increased. 

19 Other objects and advantages of the present invention will 

2 0 become more obvious hereinafter in the specification and 

21 drawings. 

22 

23 
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BRIEF DESCRIPTION OF THE DRAWINGS 
A more complete understanding of the invention and many of 
the attendant advantages thereto will be readily appreciated as 
the same becomes better understood by reference to the following 
detailed description when considered in conjunction with the 
accompanying drawings, wherein like reference numerals refer to 
like parts and wherein: 

FIG. 1 is a representative block diagram of a Fieldbus 
communications network segment displaying a host and a single 
control device; 

FIG. 2 presents a control device initialization methodology; 

FIG. 3 diagrammatically represents the logic for altering 
control device memory; and, 

FIG. 4 presents the microprocessor operating system and 
unscheduled communications timelines. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 
To provide an overall understanding of the invention, 
certain illustrative embodiments will now be described; however, 
it will be understood by one of ordinary skill in the art that 
the systems described herein can be adapted and modified to 
provide systems for other suitable applications and that other 
additions and modifications can be made to the invention without 
departing from the scope hereof. 
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1 Referring now to FIG. 1, there is shown a block diagram of a 

2 system 10 that incorporates an embodiment of the invention. The 

3 FIG. 1 system 10 comprises a host 12 that is configured for 

4 communications using the well-known Fieldbus communications 

5 protocol. The host 12 can be implemented using a digital 

6 computer system that may be any microprocessor-based system 

7 including a computer workstation, such as a PC workstation, SUN 

8 workstation, handheld or laptop computer, that comprises a 

9 program for organizing and controlling the digital computer 

^,0 system to operate according to the invention. Additionally and 

Jfl optionally, the microprocessor-based system can be equipped for 

^2 processing multimedia data, and can be, for example, a 

te conventional PC computer system with a sound and video card. The 

©4 computer system can operate as a stand-alone system when not 

ms operating as part of a networked computer system. The host may 

yye therefore be any microprocessor-based device that is designated 

57 to perform the functionality herein to uninterruptively upgrade 

"^18 software on a specified control device, such specified control 

19 device including, for example, a field device such as a 

2 0 controller, transmitter, or actuator. 

21 The host 12 may provide and receive remote command and 

22 control information to and from a plurality of control devices 

23 residing on the network. FIG. 1 displays a representative 

24 control device 14. The host 12 and control device 14 may not be 

25 co-located on the same Fieldbus segment, and communications 
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between the host 12 and control device 14 may be coupled through 
various Fieldbus and other network segments, that shall be 
referred to herein collectively as the Fieldbus communications 
network . 

Control devices may be input devices, output devices, or 
input /output devices as commonly known in the art. As indicated 
by FIG. 1, the control device comprises a Fieldbus communications 
interface 16 to receive and transmit commands and data across the 
Fieldbus network, at least one microprocessor 18 to execute 
control device resident applications and communicate with the 
host and other control devices, at least two memory areas 20, 22 
for storing executable programs and/or data that may be accessed 
by the microprocessor 18, and a selector device 24 interfaces the 
microprocessor 18 to executable instructions or data in the 
memory areas 20, 22, 

In a preferred embodiment, the memory areas 20, 22 may be 
flash memory, although other memory devices may be utilized 
without departing from the invention. Each memory area 20, 22 
may additionally be continuous, partitioned, or segmented. The 
FIG, 1 memory areas 20, 22 therefore merely represent logically 
separate memory areas, and each memory area 20, 22 may be 
comprised of memory across multiple segments, etc. 

For the purposes of this invention, all references to the 
microprocessor 18 shall be understood to refer to the embedded 
software or operating system that forms a microprocessor 
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1 operating system, wherein such an operating system is commonly 

2 known for scheduling and executing applications, allocating 

3 resources, etc. In a preferred embodiment, the microprocessor 18 

4 repeatedly performs a scheduled series of tasks during a fixed 

5 time period. The tasks are identified to the microprocessor 18 

6 through entry points that specify a memory area, wherein the 

7 memory area comprises executable instructions or data to perform 

8 and/or complete the task. In an embodiment, the memory area may 

9 comprise executable instructions or data relating to a control 
10 device application. 

ijl For purposes of this invention, each such repetitive fixed 

gB2 time period wherein the microprocessor performs the scheduled 

iSs tasks shall be defined as a macrocycle. Additionally, any time 

within the macrocycle during which the microprocessor is not 

%^ executing an application, performing application-dependent 

5^6 input/output, or performing application related communications, 

y? shall be defined as an idle period. 

58 As FIG. 1 indicates, the microprocessor 18 may access the 

19 memory areas 20/ 22 in two manners for two distinct purposes. 

2 0 The microprocessor connection to the memory areas 20, 22 through 

21 the selector device 24 represents the selector device 

22 functionality to supply the microprocessor 18 with entry points 

23 for application executable instructions or data, wherein such 

24 application instructions or data resides in the memory areas 20, 

25 22. For the purpose of this invention, such activity shall be 
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1 defined as "executable" activity, wherein the microprocessor 18 

2 executes the instructions or data residing in the memory areas 

3 20/ 22. 

4 Alternately, the microprocessor 18 may directly access the 

5 memory areas 20, 22 (i.e., without selector device 24 

6 intervention) to perform functions unrelated to application or 

7 data execution. Examples of such functions include data 

8 integrity checks, data loading or unloading, etc. For purposes 

9 of this invention, such activity shall be defined as "processing" 
©0 activity, wherein the microprocessor 18 processes the memory area 
nil contents without executing the instructions or data therein. 

gi2 The selector device 24 may designate an active memory 

p3 areaCs) from an inactive memory area(s) for the microprocessor 

i4 18. For the purposes of this invention, active memory areas 

Ss shall be defined as the memory areas that the microprocessor 18 

S6 is directed to, by the selector device 24, to obtain executable 

317 instructions or data. In a preferred embodiment, the selector 

18 device 24 activates a memory area merely by providing the 

19 microprocessor 18 with the entry points to the memory area. 

2 0 For purposes of this invention, all memory areas other than 

21 the active memory areas shall be known as inactive memory areas. 

22 The microprocessor 18 does not execute instructions or data from 

23 any inactive memory area, however the microprocessor may process 

24 the inactive memory area contents for data integrity, perform 

25 data downloading, etc, 
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1 For purposes of this invention, a new memory area shall be 

2 defined as an inactive memory area to which upgradeable 

3 executable instructions (e.g., an application) or data shall be 

4 directed, wherein such upgradeable instructions or data shall 

5 also be referred to collectively as new data. New data may work 

6 independently, to the exclusion of, or together with, existing 

7 data in active memory areas. 

8 In a preferred embodiment, the selector device 24 is 

9 incorporated as a software module that interacts with the 

10 microprocessor 18 and may be implemented through software using 

tfll higher-level languages such as C++ or Java, or optionally 

^2 microcode or machine level instructions; however, those with 

S.3 ordinary skill in the art shall recognize that the selector 

?|4 device 24 may be implemented in hardware without departing from 

fl5 the scope of the invention herein. 

f^6 Referring now to FIG. 2, there is shown a representative 

y.7 process 40 by which a control device may be initialized. In an 

H8 embodiment presented in FIG. 2, upon initialization, the control 

19 device cycles through all control device memory areas and sets to 

2 0 active all memory areas that are verified through the 

21 verification process. In such an embodiment, the control device 

22 microprocessor selects, in a logical order, a memory area 42, 

23 The microprocessor may then verify 44 the memory area contents 

24 using such well-known techniques as CRC computations, although 

25 the invention is not limited by such verification technique. If 
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the verification fails, the memory area may be marked as inactive 
46, and another memory area is selected 42. In a preferred 
embodiment, such inactive designation 46 may be a passive 
activity since all memory areas other than the active memory area 
may be by default, inactive; however, alternate embodiments may 
otherwise designate inactive memory areas using alternate 
techniques without departing from the invention herein. 

Alternately, when a memory area is properly verified, a data 
area may be assigned 48 within the memory area, and the memory 
area may be designated active 50. The next memory area in the 
logical order may then be selected 42, until all such memory 
areas are designated active or inactive. 

Although FIG. 2 presents an initialization process for one 
embodiment wherein multiple memory areas may be active, alternate 
embodiments may utilize different initialization processes. In 
applications wherein only one memory area may be allowed to be 
active, such memory area may be '^selected'' 42 by the respective 
selector device or microprocessor that may retain or preserve the 
active and inactive memory area status data from a previous 
session. In yet another embodiment, the host may store the 
location of the active memory areas for each control device, and 
transmit, using the Fieldbus protocol, the active memory 
address (es) to the respective control device upon initialization. 

Referring now to FIG, 3, there is shown a process 60 wherein 
new executable instructions or data may be provided to a 
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1 designated control device. In the FIG. 3 embodiment, updating 

2 the control device comprises downloading new data. The host may* 

3 request an upgrade to the control device, and the request may be 

4 communicated between the host and control device using Fieldbus 

5 protocols. As FIG. 1 indicates, communications between the host 

6 and the control device require communication through the Fieldbus 

7 interface, that thereafter interacts with the microprocessor that 

8 processes the commands. Such communications may occur during 

9 otherwise unscheduled communications periods between the host and 
10 control device, wherein unscheduled communications periods may be 
^ll defined as those time periods during which the control device 

f|2 microprocessor may not be previously scheduled to exchange 

23 input/output data relating to applications executing on the 

S4 control device. Such previously scheduled input/output periods 

may comprise communications between the control device and the 

fie host, or between the control device and another control device. 
97 The host may identify the control device through a user- 

Qs interface or other interactive mechanism that allows a host 

19 operator to designate a specific control device. In a preferred 

2 0 embodiment, the host comprises a user interface that similarly 

21 indicates respective active and inactive memory areas for 

22 specified control devices. The host may store information 

2 3 regarding the present active memory areas for a specified control 

24 device and display such information to the host user, or 

2 5 alternately, the host may poll the selector device of the 
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1 specified control device, using the Fieldbus protocol, to 

2 ascertain the present active memory areas. In yet another 

3 embodiment, the selector device may provide the host with the 

4 active memory area designation upon completion of the control 

5 device initialization processing as indicated by FIG. 2. 

6 In a preferred embodiment, the host user interface may allow 

7 a host operator to specify an inactive memory area as a target 

8 for the new data. Such user interface may also allow the host 

9 operator to specify the new data. Referring back to FIG. 3, the 
10 host may then issue, using Fieldbus communications protocols, a 
Jl data download request 62 that may be received by the specified 
ip control device microprocessor to cause the new memory area 

03 identifier and new data to be transmitted to the control device. 

In a preferred embodiment, the host also transfers the new 

%^ memory area entry points, wherein the entry points shall direct 

jlje the microprocessor to the executable instructions or data in the 

§7 new memory area. Such host requests and transfers are also 

Qs performed during previously defined unscheduled communications 

19 intervals. 

2 0 Upon receipt 64 of the download request and new memory area 

21 designation, new data, and new memory area entry points, the 

22 microprocessor may direct the new data to the new memory for 

23 storage. The microprocessor may also direct the new memory entry 

24 points to the selector device for storage. The host may then 
2 5 issue a verification command that may cause the control device 
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microprocessor to verify 66 the new data in the new memory area, 
wherein such verification may be, for example, a CRC computation/ 
but the invention herein is not limited to such verification 
method. In an embodiment, the microprocessor stores the result 
of such memory verification in the selector device. In a 
preferred embodiment, the microprocessor functions of receiving 
64, redirecting 64, and verifying 66 the new data, may be 
performed in parallel processes with the presently executing 
applications in the active memory areas. Such functions may 
therefore be performed at any time in the microprocessor 
timeline, other than the during scheduled input/output network 
communications intervals , 

If a proper verification of the new memory area is not 
achieved 68, the host may issue another download request, again 
designating a new memory area and the new data. The same 
inactive memory area may be utilized, or the host may request a 
different memory area if more than one inactive memory areas 
exist. 

Alternately, upon proper verification of a memory area, the 
control device microprocessor may inform the host of the proper 
verification, wherein the host may request that the new memory be 
designated an active memory 70. 

The control device microprocessor, upon receiving a request 
from the host to change the status of an inactive (i.e., new) 
memory area to active, may interrogate the verification status of 
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the new memory 72. Alternately, the microprocessor may 
interrogate whether entry points are received for the new memory 
area. If the new memory area is not verified, or entry points do 
not exist, the microprocessor may reject 74 the host request to 
change the active memory designation. Alternately, if the new 
memory is verified and entry points are stored, the host's 
request may be granted, and the microprocessor may inform the 
selector device that the new memory area may be activated 76. 

Depending upon, for example, whether the new data comprises 
cooperative as compared to replacement data, the host may issue a 
request to inactivate a presently active memory area 78. In some 
embodiments, activating and inactivating memory areas may require 
proper coordination and timing to achieve the desired 
microprocessor direction via the selector device-provided entry 
points . 

In one embodiment wherein the system is initialized through 
the cyclic process depicted in FIG. 2, memory inactivation may 
cause the memory area to purposefully fail subsequent 
verification checks. In such a system, re-activating the content 
of that memory segment may require a new download of the older 
executable instructions or data. Alternately, the inactivation 
process may be reversible with another command from the host, 
thereby preventing the necessity for another data download. 

In embodiments wherein only one memory area can be active, 
the inactivation process may be simplified and may be implemented 
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1 using default logic embedded in software or hardware. All such 

2 activation and inactivation methods and processes may be 

3 implemented in various manners without departing from the scope 

4 of the present invention. 

5 The method of indicating active or inactive memory areas 

6 relates also to the ability to return to previous versions of 

7 executable instructions or data. For example, if a system 

8 comprises N memory areas, wherein only one memory area may be 

9 active, the system may be implemented such that as many as (N-l) 
go versions of executable instructions or data may be stored in 

ill inactive memory areas. Such configuration may also allow rapid 

3E2 transition between these versions of executable instructions or 

1^3 data by issuing a host request with the new memory area 

5:4 designation. 

Alternately, when multiple memory areas are allowed to be 
active, the present invention provides a structure wherein 

Qv functionality may be easily added or eliminated. Modular 

18 upgrades may also be readily achieved in such an embodiment, 

19 wherein one memory area with a specific functionality may be 

20 upgraded to the exclusion of other active memory areas. 

21 Referring now to FIG. 4, there is shown two timelines 80 

22 indicating a representative microprocessor operating system 

23 timeline, previously defined as a macrocycle, and a corresponding 

24 unscheduled communications timeline. As mentioned previously, 

25 the macrocycle 82 may be viewed as a repeatable interval, the 

16 

20/402453.05 



duration of which may be designed to allow execution of all 
control device applications and input/output functions, with 
consideration for the overall communications bandwidth during the 
input/output functions. For example, during each representative 
macrocycle of FIG. 4, the microprocessor operating system 
executes a first application 84, wherein such first application 
is followed immediately by a first input/output interval 86. 
During the first input/output interval 86, the control device may 
transfer data relating to the first application, using the 
Fieldbus protocol. Such communications intervals 86 are 
therefore known as scheduled communications intervals, and may be 
between the control device and the host, or between the control 
device and another control device. Upon completion of the first 
input/output interval 86, the microprocessor executes a second 
application 88, wherein such second application 88 is followed in 
time by a second input/output interval 90, such second 
input /output interval 90 also being a scheduled communications 
interval. Although the representative embodiment of FIG. 4 
indicates only two applications, the invention herein is not 
limited by the number of applications executed on a control 
device during a given macrocycle. 

Referring again to FIG. 4, the selector device may activate 
or inactivate memory areas, or change the entry points, at any 
time during the macrocycle that the microprocessor operating 
system is not executing applications or utilizing application 
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1 dependent data. Such periods in the macrocycle are indicative of 

2 the previously defined idle periods 92. During these idle 

3 periods 92, the selector device may incorporate the entry points 

4 to the new memory area such that during the microprocessor's next 

5 scheduled application execution, the new entry points may direct 

6 the microprocessor to the new data. By altering the 

7 microprocessor entry points during intervals wherein the 

8 microprocessor is not performing application or application- 

9 dependent processing, the transition to the new data may occur 
10 without interrupting the microprocessor functionality or 

pL processing timeline. 

1^ As mentioned previously, activating a memory area may 

T2 require inactivating another memory area, and such 

activation/inactivation may require coordination. Inactivation, 

15 just as activation, must be performed during the idle periods 92, 

y.% when the microprocessor is neither scheduled for application 

©7 execution or application input/output. Such 

fm activation/inactivation may require several idle periods to 

19 achieve complete conformance. In an embodiment, the host may 

2 0 extend an idle period (i.e., prevent the next macrocycle from 

21 commencing) to effectuate a memory area activation or 

22 inactivation. 

2 3 Alternately, data transfers from the host computer to the 

24 new memory area, or any commands or requests from the host, may 

25 be scheduled during the unscheduled communications periods 94, 
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1 As defined previously, unscheduled communications periods 94 

2 comprise any macrocycle time interval during which the 

3 microprocessor is not performing input/output with the host or 

4 another control device. Unscheduled communications therefore 

5 comprise all time within the processing interval that is not a 

6 scheduled communications interval, 

7 As with any communications system, data rates must be 

8 considered when scheduling events. Depending upon the data rates 

9 and the data amount transferred to a new memory area, more than 
10 one macrocycle may be required to download the data; therefore, 
2l the download of executable instructions or data to a new memory 
1^2 area may occur during one macrocycle, while the verification of 

such new memory may not occur until several macrocycles after 

ak such download begins. Further, altering the microprocessor 

%S operating system entry points may require a period greater than a 

single idle period 92, thereby delaying the activation of a new 

'[A3 

Ii7 memory area for several macrocycles. 

gis In one embodiment where several control devices may be 

19 upgraded, the upgrades may be coordinated to occur at the same 

2 0 time. In such an embodiment, new data may be downloaded to all 

21 control devices, and respective microprocessors may be redirected 

22 to respective new data memory areas to achieve a synchronized or 

23 otherwise controlled upgrade, 

24 In one embodiment, the microprocessor redirection for one or 
2 5 more control devices may be scheduled to a certain time or event, 
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without departing from the invention. In such an embodiment, one 
or more control devices may comprise new data in an inactive 
memory area. The host may then monitor at least one parameter, 
wherein the parameter (s) may relate to control devices, and upon 
the particular parameter (s) attaining a predetermined value, the 
host may issue a request to redirect the microprocessor on one or 
more control devices. 

The advantage of the present invention over the prior art is 
that control devices within a Fieldbus network may be remotely 
updated with new executable instructions or data without 
disturbing the operation of the control device. 

What has thus been described is a method and apparatus to 
modify control devices residing on a Fieldbus communications 
network, without interrupting the operation of the control 
devices. The control device updating may further be controlled 
and monitored by a remotely located host that also communicates 
on the Fieldbus network. The control device may comprise at 
least two distinct memory areas, wherein at least one memory area 
must be active, and at least one memory area must be inactive. 
Active memory areas provide the control device microprocessor 
operating system with executable instructions or data. The host 
downloads new executable instructions or data to inactive memory 
areas, with associated data entry points, during unscheduled 
communications periods wherein data input/output is not being 
performed between the control device and the host or another 
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control device. Upon a full data transfer and proper 
verification of the new data, the host may issue an activation 
command that causes a selector device to activate the previously 
inactive memory area by directing the microprocessor to the entry 
points of the newly downloaded executable instructions or data. 
The memory activation must occur while the microprocessor is not 
performing application execution, application input/output, or 
application communications. By timing the memory activation in 
this manner, the microprocessor may be redirected to the newly 
downloaded executable instructions or data without microprocessor 
interruption. 

Although the present invention has been described relative 
to a specific embodiment thereof, it is not so limited. 
Obviously many modifications and variations of the present 
invention may become apparent in light of the above teachings. 
For example, the selector device functionality may be performed 
in hardware or software. The selector device may be incorporated 
within the microprocessor or independent of the microprocessor 
operating system. The Fieldbus network may contain any number of 
control devices. Each control device may have a different 
macrocycle length during which a varying number of applications 
may be executed. Depending on the network size, there may be 
more than one host. The host and the control devices may reside 
on different Fieldbus segments, wherein such segments may be 
connected through otherwise compatible network software or 
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1 hardware. The interactions and scheduling between the 

2 microprocessor and the selector device may be embedded in either ' 

3 system or otherwise shared between the systems. Wherein multiple 

4 memory areas may be active and multiple memory areas are 

5 inactive, multiple memory areas may be updated and all 

6 corresponding entry points changed within the same selector 

7 device modification. 

8 Many additional changes in the details, materials, steps and 

9 arrangement of parts, herein described and illustrated to explain 

10 the nature of the invention, may be made by those skilled in the 
art within the principle and scope of the invention, 

m Accordingly, it will be understood that the invention is not to 

11 be limited to the embodiments disclosed herein, may be practiced 
II otherwise than specifically described, and is to be understood 
If from the following claims, that are to be interpreted as broadly 
tk as allowed under the law. 
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I claim: 



1. A method for modifying memory on at least one control device, 
from a remote host device, without interrupting the operation of 
the control device, wherein the control device and the host 
device are coupled through a Fieldbus communications network, the 
method comprising: 

transferring data from the host device to the control device 
during unscheduled communications periods; 

storing the transferred data to an inactive memory area; 
and, 

redirecting at least one control instrument microprocessor, 
' during a microprocessor idle period, to execute the 
stored data in the inactive memory area. 

2. A method according to claim 1, further comprising verifying 
the stored data in the inactive memory areas. 

3. A method according to claim 1, wherein redirecting the 
microprocessor further comprises providing the microprocessor 
with entry points to the stored data. 

23 

20/402453,05 



4. A method according to claim 1, wherein transferring data 
further comprises transmitting entry points. 

5. A method according to claim 1, wherein transferring data 
further comprises transmitting executable instructions. 

6. A method according to claim 1, wherein transferring data 
further comprises synchronizing data transmissions between the 
host device and the control devices to avoid interference with 
scheduled communications. 

7. A method according to claim 1, further comprising: 

selecting at least one active memory area; and, 

inactivating the selected active memory area such that the 
microprocessor does not execute data in the selected 
active memory area. 

8. A method according to claim 1, wherein redirecting the 
microprocessor further comprises issuing an upgrade request from 
the host device to the control devices. 
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9. A method according to claim 8, wherein issuing an upgrade 
request further comprises coordinating at least one upgrade 
command from the host device to at least one control device. 

10 A method according to claim 1, wherein redirecting the 
microprocessor further comprises: 

monitoring at least one parameter; and, 

communicating a command to redirect the microprocessor when 
the parameter attains a specified value. 

11. A system for modifying memory on at least one control 
device, from a remote host device, without interrupting the 
operation of the control device, wherein the control device and 
the host device are coupled through a Fieldbus communications 
network, the system comprising: 

at least one control device, the control devices further 

comprising at least one active memory area and at least 
one inactive memory area; 

at least one control device microprocessor to execute 

instructions and data in the active memory areas; and, 
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a control device selector module to direct the 

microprocessor to at least one active memory area, the 
selector module further comprising a scheduling module 
to redirect the microprocessor during microprocessor 
idle periods. 

12. A system according to claim 11, wherein the selector module 
further comprises entry points to direct the microprocessor. 

13. A system according to claim 11, wherein the microprocessor 
further comprises a memory verification module. 

14. A system according to claim 11, wherein: 

the active memory area comprises flash memory; and, 
the inactive memory area comprises flash memory. 

15. A system according to claim 11, wherein the host device 
further comprises: 

a Fieldbus communications module to access the Fieldbus 
communications network; 
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a control module to receive, transmit, and display commands 
and data between the Fieldbus communications network 
and a host device user; and, 

a control device communications module to transmit and 

receive commands and data between the host device and 
the control device. 

16. A system according to claim 15, wherein the control module 
further comprises a user interface. 

17. A system according to claim 11, wherein the host device is a 
microprocessor-based device. 

18. A system according to claim 11, wherein: 

the active memory data comprises executable instructions and 
data; and, 

the inactive memory data comprises executable instructions 
and data. 
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1 Docket No. FXO-118.01 

2 

3 FIELDBUS UPGRADABLE APPARATUS AND METHOD 

4 

5 ABSTRACT OF THE DISCLOSURE 

6 A method and apparatus to modify control devices residing on 

7 a Fieldbus communications network, without interrupting the 

8 operation of the control devices. The control device updating 

9 may further be controlled and monitored by a remotely located 

10 host that also communicates on the Fieldbus network. The control 

11 device may comprise at least two distinct memory areas, wherein 

12 at least one memory area must be active, and at least one memory 

13 area must be inactive. Active memory areas provide the control 

14 device microprocessor operating system with executable 

15 instructions or data. The host downloads new executable 

16 instructions or data to inactive memory areas, with associated 

17 data entry points, during unscheduled communications periods 

18 wherein data input/output is not being performed between the 

19 control device and the host or another control device. Upon a 
2 0 full data transfer and proper verification of the new data, the 

21 host may issue an activation command that causes a selector 

22 device to activate the previously inactive memory area by 

2 3 directing the microprocessor to the entry points of the newly 

24 downloaded executable instructions or data. The memory 

25 activation must occur while the microprocessor is not performing 
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1 application execution, application input/output, or application 

2 communications. By timing the memory activation in this manner, 

3 the microprocessor may be redirected to the newly downloaded 

4 executable instructions or data without microprocessor 

5 interruption. 
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